General

  • Target

    28b88d6063e27361f19816c0186fcfd6602d327e6407e98893bbb7e595563cf3

  • Size

    316KB

  • MD5

    25197af9391d7ab61ac66d69dd9accb8

  • SHA1

    12112706d8b0836423b6f8d6cf08a59ef8766cfb

  • SHA256

    28b88d6063e27361f19816c0186fcfd6602d327e6407e98893bbb7e595563cf3

  • SHA512

    4409a872aa3de5962aefa54f0dc29e40cfd4264012b5349c1c0197148b37553245684d8ad333fc242c1ba4a800089dd74123afe06b2f93639e3ecec9f9e90dd9

  • SSDEEP

    3072:T4PcJlCcv+k/Q131RDYYYLXoqm6eguFIR:T4P9cvhQh1cQP

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 28b88d6063e27361f19816c0186fcfd6602d327e6407e98893bbb7e595563cf3
    .exe windows:4 windows x86 arch:x86

    80101b7cdff9c96b2ad347caaa98701b


    Headers

    Imports

    Sections